$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fqAJFXsfPqY8WYHIemo7xFXhcd0.cer File: fqAJFXsfPqY8WYHIemo7xFXhcd0.cer (raw, json) Hash identifier: FcVI22uS3fGIo0HvUAID83Jpb0UQmlMYj3yKgUl9AXc= Subject key identifier: 7E:A0:09:15:7B:1F:3E:A6:3C:59:81:C8:7A:6A:3B:C4:55:E1:71:DD Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/fqAJFXsfPqY8WYHIemo7xFXhcd0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:04 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.20.246.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14267 (0x37bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:53:04 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7EA009157B1F3EA63C5981C87A6A3BC455E171DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:15:53:5e:e1:5c:36:49:fc:2c:4b:8f:4f: da:17:f9:23:42:df:46:fd:02:d7:50:b3:18:77:07: f9:bc:f6:68:13:11:e5:22:3d:23:16:69:5d:6c:75: a6:de:f8:e3:47:2f:b0:10:0c:f4:55:1f:d2:64:7a: 5d:0f:b6:16:2b:53:75:09:5f:9b:2d:09:dd:e3:1c: 28:1e:f5:a0:8c:c0:1c:9d:d5:7b:70:aa:31:45:5b: 05:ce:b6:4e:b9:a9:3f:98:de:9a:3a:00:6b:bd:e3: 51:20:2b:1d:9d:51:01:20:c0:74:63:8c:fc:dc:a9: 1f:a2:9c:ac:dd:04:1e:3b:89:fa:fa:f1:f2:2b:1b: 7e:1d:b5:7d:d5:19:23:1d:e3:af:a5:75:ab:d8:7d: 6c:19:fd:e4:5f:e0:13:59:05:fb:ca:1f:f5:7b:24: 32:58:e8:c9:f1:82:4f:19:10:6b:5c:0f:b9:bd:2d: 29:51:d5:fb:12:18:bc:55:c6:a7:27:b3:f3:06:6d: 5d:19:1d:f8:0a:5b:2a:03:22:90:33:64:f0:71:db: 0f:e9:f9:cb:db:89:10:f8:c1:db:ba:a7:46:7f:d2: 3e:9e:c4:62:49:9a:44:e2:f0:7e:38:5b:89:e7:b7: 73:7e:b5:82:fc:94:96:0d:ce:b1:d5:4d:b7:8a:2d: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A0:09:15:7B:1F:3E:A6:3C:59:81:C8:7A:6A:3B:C4:55:E1:71:DD X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/fqAJFXsfPqY8WYHIemo7xFXhcd0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.246.0/23 Signature Algorithm: sha256WithRSAEncryption a3:fd:f1:0b:b8:c0:86:2e:c7:25:0a:16:64:91:a0:90:3a:53: 2d:43:03:30:68:18:5e:23:14:a6:e8:b1:bc:bd:35:ef:c5:fd: 9f:5c:9e:c9:87:fd:a9:5f:25:50:4a:bb:36:c2:d0:1c:77:71: ff:42:4e:f9:6c:78:70:14:30:75:f3:4c:cb:ad:90:29:91:5c: 75:f7:cc:71:62:8e:ba:f9:7a:1b:2d:5a:20:66:6d:bd:1f:50: 9f:5d:51:2d:24:52:d7:6a:67:f3:ba:74:74:d5:32:65:cc:bd: 8f:80:ed:84:bf:d7:11:e7:33:66:5f:58:30:36:1b:de:b3:2b: f9:a3:cc:31:7a:b3:f5:d6:f4:3d:4e:98:78:7e:c2:e1:1a:a0: 5b:65:09:3d:1b:32:89:1f:83:94:72:8e:16:58:3b:66:5c:f9: ff:54:b3:91:fa:b8:bf:03:e4:99:f6:b0:75:21:d4:56:82:8e: e7:04:c4:f2:d8:16:16:5f:2f:34:f4:ab:a7:2c:ef:84:d0:27: d8:95:80:7d:ee:05:10:ff:f5:1d:cd:e5:ef:83:ab:f0:b0:4a: 37:2a:62:6e:31:4b:57:e4:4a:46:c8:7c:12:f6:a5:9f:82:cb: 90:8f:65:dc:c3:b4:95:c1:38:5d:cf:a7:a6:10:1d:df:ee:fa: 91:37:e8:aa -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN7swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTMwNFoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoN0VBMDA5MTU3QjFGM0VBNjNDNTk4MUM4N0E2QTNCQzQ1NUUxNzFE RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOpLFVNe4Vw2SfwsS49P 2hf5I0LfRv0C11CzGHcH+bz2aBMR5SI9IxZpXWx1pt7440cvsBAM9FUf0mR6XQ+2 FitTdQlfmy0J3eMcKB71oIzAHJ3Ve3CqMUVbBc62TrmpP5jemjoAa73jUSArHZ1R ASDAdGOM/NypH6KcrN0EHjuJ+vrx8isbfh21fdUZIx3jr6V1q9h9bBn95F/gE1kF +8of9XskMljoyfGCTxkQa1wPub0tKVHV+xIYvFXGpyez8wZtXRkd+ApbKgMikDNk 8HHbD+n5y9uJEPjB27qnRn/SPp7EYkmaROLwfjhbiee3c361gvyUlg3OsdVNt4ot kTsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR+oAkVex8+pjxZgch6ajvEVeFx3TAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjcxL2ZxQUpGWHNmUHFZOFdZSEllbW83eEZYaGNkMC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdFPYwDQYJKoZIhvcNAQELBQAD ggEBAKP98Qu4wIYuxyUKFmSRoJA6Uy1DAzBoGF4jFKbosby9Ne/F/Z9cnsmH/alf JVBKuzbC0Bx3cf9CTvlseHAUMHXzTMutkCmRXHX3zHFijrr5ehstWiBmbb0fUJ9d US0kUtdqZ/O6dHTVMmXMvY+A7YS/1xHnM2ZfWDA2G96zK/mjzDF6s/XW9D1OmHh+ wuEaoFtlCT0bMokfg5RyjhZYO2Zc+f9Us5H6uL8D5Jn2sHUh1FaCjucExPLYFhZf LzT0q6cs74TQJ9iVgH3uBRD/9R3N5e+Dq/CwSjcqYm4xS1fkSkbIfBL2pZ+Cy5CP ZdzDtJXBOF3Pp6YQHd/u+pE36Ko= -----END CERTIFICATE-----Generated at Sat Nov 23 01:15:54 2024 by rpki-client on console-fra.rpki-client.org